$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: 8BfRw1vGktlk/mwclfHT5kHb/QbBcowcs2U9YzapDms= Subject key identifier: 39:17:2E:05:B5:CB:7D:35:7B:A9:95:EB:19:E3:3A:F0:42:5B:9F:46 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 021D Signing time: Sat 23 Aug 2025 02:21:16 +0000 Manifest this update: Sat 23 Aug 2025 02:21:15 +0000 Manifest next update: Sat 30 Aug 2025 02:21:15 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: QQ3UrfU497jaIDtUIL3Er/P3SMajNVBHYXcmvR5MFkw=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Aug 23 02:21:15 2025 GMT Not After : Aug 30 02:21:15 2025 GMT Subject: CN=68a9259c-b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:ea:98:1a:f0:b1:33:96:50:d9:d2:cd:83: 63:9a:0d:f9:a9:1b:e1:82:f5:a5:1b:a8:57:dd:59: 96:20:7f:e9:63:80:9c:b8:60:b2:8c:29:e2:81:ab: b0:af:1a:48:66:7b:1b:16:43:df:f2:fb:0d:9d:41: 0b:f4:08:57:eb:85:cd:a2:1a:87:d0:19:09:3c:6f: 1b:88:2b:27:88:ea:37:73:8f:f4:7c:dd:23:88:98: d4:9d:17:80:59:ba:ab:50:8d:77:37:03:1a:44:b9: eb:c2:e1:3e:ee:94:3a:37:a1:57:f8:2c:77:1e:98: ac:77:4d:12:93:45:f9:3f:e9:aa:55:cf:53:5c:05: 92:45:28:91:4b:aa:12:3e:7c:4c:11:24:96:0d:e1: 56:47:5e:9a:22:4a:49:c1:6a:70:57:b3:a2:dc:3f: 2b:49:09:8b:0f:cf:b9:51:29:cf:0e:b9:64:ef:22: 5f:54:e6:e9:eb:25:7d:1f:ad:bd:1c:ba:d5:c7:31: 6f:66:b2:ae:34:c8:84:8f:01:33:f1:8f:88:75:e6: 9c:29:20:f4:09:9e:46:5e:e9:02:a6:2b:60:0b:60: c3:25:1d:fc:9a:df:35:3a:fa:cc:7c:fd:52:4b:e0: b0:09:3f:bb:5d:8e:75:b2:e6:31:aa:4d:db:e0:91: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:2E:05:B5:CB:7D:35:7B:A9:95:EB:19:E3:3A:F0:42:5B:9F:46 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:25:15:bb:dd:c7:40:25:56:c2:a2:9e:06:6f:36:3f:8f:bf: 75:bb:ef:05:ae:fc:7e:8a:c0:90:33:87:4e:62:47:08:bc:13: 2f:0e:c7:b9:2b:2a:73:4f:4c:dd:ff:88:cf:3d:af:ff:dc:8a: 70:7e:47:69:0f:13:30:99:30:bc:3f:16:7e:73:e6:c3:b2:af: 13:45:82:a0:0b:38:ce:b8:81:1b:46:07:21:9c:40:65:c2:75: 84:81:a1:f3:19:1d:6c:df:32:1b:ed:f8:fd:eb:a1:d9:f5:1b: 2e:c0:34:d5:62:12:0b:55:5a:7a:ac:c9:55:09:b7:d8:ab:14: b0:c4:8d:09:54:fc:58:1a:86:33:16:53:0e:a8:05:55:1d:c6: 11:2c:b1:72:33:c6:d7:1e:fc:8e:4c:d3:64:2a:a3:0b:1c:8e: 3f:ce:13:f7:ae:aa:98:e3:7b:e2:32:ea:cb:3d:ef:12:4f:03: af:62:cc:40:74:6d:56:ac:3c:b8:49:55:b5:29:9d:54:3a:ae: 80:52:6f:fb:c6:24:48:e6:6a:42:bf:72:e0:cb:82:41:a6:dd: b3:26:9b:91:42:e6:2e:2c:b9:12:7a:f6:f3:10:b2:fc:cd:9a: 46:4b:80:da:b1:b6:3c:99:60:b6:7a:ca:37:8d:69:50:7a:fd: 18:07:92:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwODIzMDIyMTE1WhcNMjUwODMwMDIyMTE1WjAYMRYwFAYD VQQDEw02OGE5MjU5Yy1iN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNDqmBrwsTOWUNnSzYNjmg35qRvhgvWlG6hX3VmWIH/pY4CcuGCyjCnigauw rxpIZnsbFkPf8vsNnUEL9AhX64XNohqH0BkJPG8biCsniOo3c4/0fN0jiJjUnReA WbqrUI13NwMaRLnrwuE+7pQ6N6FX+Cx3Hpisd00Sk0X5P+mqVc9TXAWSRSiRS6oS PnxMESSWDeFWR16aIkpJwWpwV7Oi3D8rSQmLD8+5USnPDrlk7yJfVObp6yV9H629 HLrVxzFvZrKuNMiEjwEz8Y+IdeacKSD0CZ5GXukCpitgC2DDJR38mt81OvrMfP1S S+CwCT+7XY51suYxqk3b4JEwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkXLgW1 y301e6mV6xnjOvBCW59GMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1JRW73cdAJVbCop4GbzY/j791u+8Frvx+isCQM4dOYkcIvBMvDse5 KypzT0zd/4jPPa//3IpwfkdpDxMwmTC8PxZ+c+bDsq8TRYKgCzjOuIEbRgchnEBl wnWEgaHzGR1s3zIb7fj966HZ9RsuwDTVYhILVVp6rMlVCbfYqxSwxI0JVPxYGoYz FlMOqAVVHcYRLLFyM8bXHvyOTNNkKqMLHI4/zhP3rqqY43viMurLPe8STwOvYsxA dG1WrDy4SVW1KZ1UOq6AUm/7xiRI5mpCv3Lgy4JBpt2zJpuRQuYuLLkSevbzELL8 zZpGS4DasbY8mWC2eso3jWlQev0YB5IP -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:04 2025 by rpki-client